基于局域网数据链路层的加密系统

【作者】 张波；

【导师】 俞永康；

【作者基本信息】 电子科技大学 ， 微电子学与固体电子学， 2003， 硕士

【摘要】 计算机网络迅速发展，网络的安全问题越来越受到广泛关注，导致了各种安全产品也大量出现。局域网内部的安全问题往往被人们忽视， 但是其安全隐患带来的损失是巨大的。本加密系统就是基于确保局域网内部数据传送的安全的目的来考虑和设计的。该系统已经完成了以太网的链路层安全体系的设计、自定义的安全协议以及相关的协议数据传输、链路层的安全数据的传送接口、以及相关的加解密和控制电路。整体系统的模拟和实际测试表明该加密网卡电路基本上完成了设计功能，达到设计指标， 在相当的程度上为局域网上的数据传输起到了安全的保护作用。在该安全产品的电路设计中，作者首先阐述了以太网的网络传输基本技术和数据加解密的基本原理，给出理论依据；然后根据功能需要并结合FPGA的设计技术进行了电路的总体结构设计，实现了网络链路层的安全体系结构和相应的安全协议，完成了密钥的交换和数据的保密传输； 在EDA综合工具的帮助下完成了每个具体功能电路和整体电路的设计，并最终做成了加密网卡。在关键的功能电路设计中，通过前置计算达到提高运算速度、简化电路和减少资源的目的。反复的功能仿真和测试为正确的电路设计加快了设计进度。更多还原

【Abstract】 With the great development of computer network, more and more people are caring about the security of network, which leads to a lot of new security products come into market. The security of local network is often neglected, but it is harmful to our benefit. So, we design the new encryption system in order to secure the safety of data transmission in local network.In this system, we have designed the safety architecture of link layer in Ethernet, implemented and transferred security protocol defined by us. Moreover, we have finished the interface to link layer and circuit for encryption and control. After fulfilled the FPGA circuit design, we achieved our expectation by simulation and system test. We proved that our system could prevent our local network data transmission from modification and demolishment in some degree.During the safety product design, the data transfer technology in local network and the basic theory of encryption is given first. According to the function requirement and FPGA technology, we implemented the security architecture, key exchanging with communication peers and data encryption. Under the help of advanced EDA tools we completed the circuit and made the Printed Circuit Board at last.In order to improve the processing speed and reduce the system source, we have done some pre-computing. Many times simulations and verifications were taken for the purpose of making our design correct and short our design time.更多还原